Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b8b8a00-31ee-3213-8745-e06068d1b84f.roa
File:                     3b8b8a00-31ee-3213-8745-e06068d1b84f.roa (raw, json)
Hash identifier:          MaDGVsLZi74BOQt8SJBfCNurhbdR3BtylrwAdIwrduY=
Subject key identifier:   77:9B:27:11:36:91:79:1F:5F:7E:3D:C9:38:A9:75:3D:C0:EF:37:FE
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7BB44FAE30CBA751D567320
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b8b8a00-31ee-3213-8745-e06068d1b84f.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.176.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:bb:44:fa:e3:0c:ba:75:1d:56:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=993bb936-c501-4d2d-bcdf-e1b2f8079edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:81:03:71:ad:cf:27:b8:5c:c0:69:76:a1:
                    32:2b:74:3b:ce:84:c3:b7:1d:99:5f:9f:a5:60:cd:
                    21:f5:13:9e:fa:a1:87:7d:6c:fa:f8:0f:2e:c7:34:
                    91:e4:8b:58:46:67:7b:d7:0c:da:81:0c:9e:15:57:
                    04:81:77:a1:ce:03:91:4c:3f:3e:2e:29:51:f8:5d:
                    c6:31:71:56:45:fd:05:ad:60:00:7e:d6:84:e1:ac:
                    44:ae:c3:ea:e4:32:bd:de:81:9a:26:35:65:88:a4:
                    b1:d2:8b:4c:58:21:68:a9:18:8b:bd:ce:44:0e:a3:
                    3d:f9:a5:ca:8f:83:87:ab:33:d5:8c:4b:87:03:72:
                    be:17:e9:c4:85:48:46:f1:db:d1:34:ff:60:4b:97:
                    42:ca:d0:db:03:b3:7e:36:6f:f5:d3:ae:a1:9a:85:
                    e0:07:35:bb:43:e0:36:7f:52:67:9b:07:1a:d5:01:
                    82:70:96:c8:0b:22:1e:05:94:dc:9c:a4:58:93:e4:
                    93:8c:76:d4:25:f7:6b:c5:d6:f4:2c:99:f6:67:89:
                    b2:a4:22:ad:3a:1c:8f:d2:b4:17:88:90:fd:19:e0:
                    a0:7d:e9:1f:e3:e7:0a:81:14:a3:30:72:c4:12:19:
                    2f:0d:6d:53:88:e4:18:29:31:5b:d9:6c:9f:ee:94:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9B:27:11:36:91:79:1F:5F:7E:3D:C9:38:A9:75:3D:C0:EF:37:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3b8b8a00-31ee-3213-8745-e06068d1b84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:06:4f:82:f1:ab:a9:11:f7:00:b2:8a:60:9e:26:2a:57:
         62:d2:a7:a3:80:42:1d:7a:b1:57:d1:d6:ef:c4:69:25:bd:42:
         ed:6b:fb:aa:98:7b:81:d0:8b:c1:0c:06:f3:ab:2e:99:de:38:
         67:da:f5:f8:0a:81:ea:0d:d6:b4:55:17:53:97:cc:07:5d:f8:
         04:26:7b:09:e0:13:9a:30:e1:b3:eb:ee:38:89:b3:84:4c:1a:
         df:e0:fd:8b:dc:d8:15:34:95:1b:e6:78:85:cd:63:de:57:bf:
         a8:76:5f:85:59:d2:ba:74:43:a9:db:8c:b3:d3:73:bc:87:ab:
         67:f3:85:c7:50:00:62:05:70:27:b4:a5:6d:28:0d:81:c1:84:
         b4:b3:81:9d:c8:99:ae:55:6c:2b:e9:fc:95:60:bd:d9:f0:10:
         3c:6a:81:23:aa:cc:2d:51:b3:4f:d0:2e:0b:0b:2b:fb:80:b7:
         18:9c:c0:8d:53:01:a6:7c:f9:57:c2:32:c8:8c:40:b0:4e:6a:
         ad:9e:b2:b3:56:ff:32:62:8e:7b:15:f6:47:20:f3:58:bf:dc:
         a6:4d:75:00:d4:38:8c:95:33:f8:15:09:f6:c2:a2:99:ad:e5:
         00:c0:2e:9f:db:a7:5e:c3:15:76:70:ba:30:26:ee:25:98:b3:
         3d:a4:05:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDqnu0T64wy6dR1WcyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk
ZDNjMB4XDTIxMDcyMDA0MDAwMFoXDTIzMTAyMjA0MDAwMFowLzEtMCsGA1UEAxMk
OTkzYmI5MzYtYzUwMS00ZDJkLWJjZGYtZTFiMmY4MDc5ZWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbaBA3Gtzye4XMBpdqEyK3Q7zoTDtx2ZX5+l
YM0h9ROe+qGHfWz6+A8uxzSR5ItYRmd71wzagQyeFVcEgXehzgORTD8+LilR+F3G
MXFWRf0FrWAAftaE4axErsPq5DK93oGaJjVliKSx0otMWCFoqRiLvc5EDqM9+aXK
j4OHqzPVjEuHA3K+F+nEhUhG8dvRNP9gS5dCytDbA7N+Nm/1066hmoXgBzW7Q+A2
f1Jnmwca1QGCcJbICyIeBZTcnKRYk+STjHbUJfdrxdb0LJn2Z4mypCKtOhyP0rQX
iJD9GeCgfekf4+cKgRSjMHLEEhkvDW1TiOQYKTFb2Wyf7pSuwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHebJxE2kXkfX349yTipdT3A7zf+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3
YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2I4YjhhMDAtMzFlZS0z
MjEzLTg3NDUtZTA2MDY4ZDFiODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl
NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy
ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji
ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaISwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADipBk+C8aupEfcAsopgniYqV2LSp6OAQh16sVfR1u/EaSW9Qu1r+6qY
e4HQi8EMBvOrLpneOGfa9fgKgeoN1rRVF1OXzAdd+AQmewngE5ow4bPr7jiJs4RM
Gt/g/Yvc2BU0lRvmeIXNY95Xv6h2X4VZ0rp0Q6nbjLPTc7yHq2fzhcdQAGIFcCe0
pW0oDYHBhLSzgZ3Ima5VbCvp/JVgvdnwEDxqgSOqzC1Rs0/QLgsLK/uAtxicwI1T
AaZ8+VfCMsiMQLBOaq2esrNW/zJijnsV9kcg81i/3KZNdQDUOIyVM/gVCfbCopmt
5QDALp/bp17DFXZwujAm7iWYsz2kBZc=
-----END CERTIFICATE-----
Generated at Sun Oct 22 04:16:36 2023 by rpki-client on console-fra.rpki-client.org